security constraints

kathir vel

Ranch Hand

Posts: 92

posted 9 years ago

Hi All, Inside the security constraints(in DD) tag thers is sub tag called auth_constraint ,what is auth?Is it authorization or authentication.Can any one tell me the exact difference between those two?Thanks.

Pablo Moctezuma

Greenhorn

Posts: 5

posted 9 years ago

Hi,

auth-constraint refers to authorization constraint.

"Authentication means by which communicating entities prove to one another that they are acting on behalf of specific identities that are authorized for access." (You are who you say you are?)

"Authorization is finding out if the person, once identified, is permitted to have the resource." (to make sure you are allowed to see certain resource)